[Zope-CMF] Q: how to forbid users to join?

[Jens Quade]

seb bacon <seb@jamkit.com> writes:

> Replace the CMFDefault/MembershipTool.py with one of your own, or edit
> it so that the addMember method is protected with a Manager-only
> permission.  I've put a request in the tracker for an 'Add Member'
> permission for CMFDefault, with patches, at:
> 
>   http://www.zope.org/Products/PTK/Tracker/287

Not in MembershipTool, but in RegistrationTool:

    security.declareProtected(AddPortalMember, 'addMember')
    def addMember(self, id, password, roles=('Member',), domains='',
                  properties=None):

It seems to be already there :)

MembershipTool's addMember should stay private, IMHO.



-- 
Shipping software is an unnatural act